Privacy Law and Privacy Regulations

The Federal Trade Commission has released a draft enforcement policy statement targeting undisclosed personalized pricing practices, proposing that retailers must clearly disclose when prices are individualized based on consumer data. The proposal would require businesses to explain not only that a price is personalized, but also the basis for personalization and the types of personal data used in pricing decisions.

The Federal Trade Commission has proposed a new policy statement targeting personalized pricing practices that use consumer surveillance data. This episode explores the agency's disclosure-based enforcement framework and examines how businesses can distinguish between lawful dynamic pricing and potentially problematic individualized pricing algorithms before the September 2026 comment deadline.

As artificial intelligence tools become increasingly accessible for drafting legal documents, individuals are turning to AI to create wills without attorney supervision. While these AI-generated documents may appear professionally crafted, they harbor serious legal defects that often surface only after death, when correction is impossible. This analysis examines the critical risks of AI-drafted wills, including execution formalities that AI cannot supervise, failures to capture testamentary intent, and the

AI meeting assistants offer powerful productivity features but create significant legal and operational risks around data management, confidentiality, employee monitoring, and regulatory compliance. Organizations must understand how these tools capture, process, and retain meeting content through third-party infrastructure, potentially exposing privileged communications and sensitive business information. This analysis examines the complex data ownership issues, privacy obligations, discovery implications,

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.

Taft's latest compilation reveals over 60 state-level AI regulations now govern commercial applications, spanning healthcare notifications, chatbot disclaimers, risk assessments, and employment screening. Recent additions include Illinois's catastrophic risk framework for frontier AI models, Rhode Island's healthcare and companion app disclosure requirements, and Connecticut's broad algorithmic regulation affecting SaaS providers and social media platforms.